Federal agents have started doing something unusual in the fight against online investment fraud. Instead of waiting for a scheme to run its course and then chasing the money afterward, they are reaching victims while the crime is still unfolding. Through an initiative the bureau calls Operation Level Up, the FBI has identified thousands of Americans who were being drained by cryptocurrency investment schemes and contacted them before the damage became permanent.
The scale of what that early warning has preserved is notable. The bureau estimates the program has spared victims roughly $562 million that would otherwise have disappeared into overseas accounts. For a category of crime where recovered funds are usually measured in pennies on the dollar, stepping in before a transfer clears marks a real shift in approach.
Finding victims before they know they are victims
The core idea behind the program is speed. Analysts sift through financial records and blockchain movement to spot people who are actively sending money to fraudulent crypto platforms, and then agents reach out directly to warn them. Many of those contacted are stunned to hear from the government, because they still believe the account they have been funding is a legitimate investment that is quietly growing.
According to the FBI’s account of Operation Level Up, the effort has notified close to 9,000 victims of ongoing schemes and, in the process, headed off an estimated $562 million in additional losses. The bureau describes the outreach as a way to break the spell before a target liquidates savings, borrows against a home, or drains a retirement account to chase promised returns that were never real.
That framing points to one of the hardest features of modern investment fraud. The people being victimized often do not recognize the crime until the money is gone, because the scheme is designed to look like success right up until the moment a withdrawal is refused.
The scam these agents are interrupting
The frauds at the center of Operation Level Up usually follow a recognizable arc. First contact tends to come from a stranger: a misdirected text message, a friendly note on social media, or a new connection on a dating app. The conversation rarely mentions money at the start. It builds rapport over days or weeks, and only later turns toward a supposedly can’t-miss cryptocurrency opportunity.
From there the target is steered onto a slick trading platform that displays climbing balances and tidy gains. Those numbers are fabricated. Every deposit deepens the illusion, and the operators frequently encourage larger and larger contributions, sometimes even allowing a small early withdrawal to cement trust. When the victim finally tries to take real money out, the account freezes, new fees appear, or the contact vanishes entirely.
Investigators and consumer advocates have taken to calling this pattern “pig butchering,” a blunt translation of the scammers’ own term for fattening a target before the slaughter. Older adults are among the most heavily pursued, in part because they are more likely to hold substantial retirement savings. Anyone who suspects they are being pulled into one of these schemes can report it through the FBI’s Internet Crime Complaint Center, the same channel the bureau uses to build the case files that make interventions like this possible.
Why interrupting the scheme changes the math
The reason mid-fraud contact matters so much comes down to how fast stolen cryptocurrency disappears. Once funds leave a victim’s wallet, they are typically routed through a chain of accounts and exchanges, often across several countries, within hours. By the time a traditional investigation identifies the loss, the trail has gone cold and the money is beyond reach. That is why after-the-fact recovery in crypto fraud has historically been so rare.
Reaching a victim before the next transfer flips that equation. A single warning phone call can stop tens or hundreds of thousands of dollars from ever entering the laundering pipeline. Multiplied across thousands of cases, those prevented transfers add up to the $562 million figure the bureau now cites, money that stayed in ordinary bank and retirement accounts rather than funding criminal networks abroad.
The approach also changes the emotional dynamics of these crimes. Victims of long-running romance and investment scams are often deep in denial, having been coached by the fraudster to distrust family, banks, and even law enforcement. An early, direct notification from investigators can provide the outside confirmation a target needs to stop before the losses compound.
What the effort signals for the year ahead
Operation Level Up arrives against a backdrop of record fraud losses. Reported losses to online scams have climbed into the tens of billions of dollars annually, with investment fraud and cryptocurrency schemes accounting for a growing share of the damage. Enforcement actions and arrests continue, but prosecutions can take years and rarely make victims whole.
Prevention-focused work like this points toward a complementary strategy: use data to get ahead of the criminals rather than only clean up behind them. The economics are favorable, since a warning costs a fraction of a full investigation and preserves far more money than most seizures recover. For a fraud category built on secrecy and urgency, simply telling a target the truth in time turns out to be one of the more powerful tools available.
None of it eliminates the underlying threat. The networks running these schemes are large, well organized, and quick to adapt. But the results so far suggest that reaching people mid-fraud can blunt the financial harm in ways that traditional enforcement has struggled to match, and that shifting resources toward early warning may protect more savings than waiting for the money to vanish first.
This article was produced with AI assistance and reviewed against the cited primary sources.
Free tool for readers: Most people don’t find out they’re off track until it’s too late. You can see where your retirement stands with a free Retirement Safety Score in about five minutes — no sign-up required to see it.



